Search Web - CN

• Analyzed: May 11, 2026, 4:39 AM
• Findings: 1
• Version: 0.1.0
• Hash: b5a0c6e05dee87200f7ef3708065e4d40b8b4eb54bc2811493e0f261f87f7154
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides a web search capability using the Volcengine API, reading `VOLCENGINE_SEARCH_API_KEY` and `VOLCENGINE_SEARCH_BOT_ID` from environment variables for authentication, as documented in `SKILL.md` and `README.md`. The `scripts/volcengine_search_web.py` script makes standard API calls to `https://open.feedcoopapi.com/agent_api/agent/chat/completion` and does not contain any malicious code, unauthorized file system access, shell execution, or data exfiltration beyond its stated purpose. Instructions in `SKILL.md` are descriptive and do not attempt prompt injection against the OpenClaw agent.